Questions & Answers PDF Page 1 


Eccouncll 


312-50V11 Exam 
Certified Ethical Hacker V11 


WY) CERTKILLERS 


Thank you for Downloading 312-50V11 exam PDF Demo 


You can Buy Latest 312-50V11 Full Version Download 


https://www.certkillers.net/Exam/312-50V11 


https://www.certkillers.net 


Questions & Answers PDF Page 2 


Version: 9.1 


Question: 1 


While performing online banking using a Web browser, a user receives an email that contains a link 
to an interesting Web site. When the user clicks on the link, another Web browser session starts and 
displays a video of cats playing a piano. The next business day, the user receives what looks like an 
email from his bank, indicating that his bank account has been accessed from a foreign country. The 
email asks the user to call his bank and verify the authorization of a funds transfer that took place. 
What Web browser-based security vulnerability was exploited to compromise the user? 


A. Clickjacking 

B. Cross-Site Scripting 

C. Cross-Site Request Forgery 
D. Web form input validation 


Answer: C 


Cross Site Request Forgery (XSRF) was committed against the poor individual. Fortunately the user's 
bank checked with the user prior to sending the funds. 

If it would be Cross Site Request Forgery than transaction shouldn't be shown from foreign country. 
Because CSRF sends request from current user session. It seems XSS attack where attacker stolen the 
cookie and made a transaction using that cookie from foreign country. 


Question: 2 


Which service in a PKI will vouch for the identity of an individual or company? 


A. KDC 
B. CR 
C. CBC 
D. CA 


Answer: D 


Question: 3 


Identify the web application attack where the attackers exploit vulnerabilities in dynamically 
generated web pages to inject client-side script into web pages viewed by other users. 


A. LDAP Injection attack 
B. Cross-Site Scripting (XSS) 


https://www.certkillers.net 


Questions & Answers PDF Page 3 


C. SQL injection attack 
D. Cross-Site Request Forgery (CSRF) 


Answer: B 


Question: 4 


User A is writing a sensitive email message to user B outside the local network. User A has chosen to 
use PKI to secure his message and ensure only user B can read the sensitive email. At what layer of 
the OSI layer does the encryption and decryption of the message take place? 


A. Application 
B. Transport 

C. Session 

D. Presentation 


Answer: D 


Question: 5 


A new wireless client is configured to join a 802.11 network. This client uses the same hardware and 
software as many of the other clients on the network. The client can see the network, but cannot 
connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to 
the association requests being sent by the wireless client. What is a possible source of this problem? 


A. The WAP does not recognize the client’s MAC address 
B. The client cannot see the SSID of the wireless network 
C. Client is configured for the wrong channel 

D. The wireless client is not configured to use DHCP 


Answer: A 
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